@anuma/sdk 3.13.2 → 4.0.0

package/dist/expo/index.cjs

@@ -16938,7 +16938,8 @@ function configMatches(a, b) {
   return a.redacted === b.redacted && a.facetsSignature === b.facetsSignature && (a.reviewedMemoryIdsSignature ?? "") === b.reviewedMemoryIdsSignature && a.scopes.length === b.scopes.length && a.scopes.every((s, i) => s === b.scopes[i]);
 }
 function reviewedMemoryIdsSignature(ids) {
-  if (ids === void 0 || ids.length === 0) return "";
+  if (ids === void 0) return "";
+  if (ids.length === 0) return "\0gated-empty";
   return [...new Set(ids)].sort().join("\n");
 }
 function facetsSignature(facets) {
@@ -17048,7 +17049,16 @@ async function synthesizeFacet(facet, ctx, options, prior) {
   const factTypeWeights = { ...DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, ...options.factTypeWeights };
   const proofCountAlpha = options.proofCountAlpha ?? DEFAULT_PROFILE_PROOF_ALPHA;
   const reviewed = options.reviewedMemoryIds;
-  const hasReviewGate = reviewed !== void 0 && reviewed.length > 0;
+  const hasReviewGate = reviewed !== void 0;
+  if (hasReviewGate && reviewed.length === 0) {
+    return {
+      key: facet.key,
+      label: facet.label,
+      text: "",
+      sourceMemoryIds: [],
+      generatedAt: Date.now()
+    };
+  }
   const recalled = await recall(facet.query, ctx, {
     scopes,
     limit: hasReviewGate ? RECALL_MAX_LIMIT : limit,

package/dist/expo/index.d.mts

@@ -7710,10 +7710,20 @@ interface SynthesizeProfileOptions extends PortalLlmAuth {
      */
     proofCountAlpha?: number;
     /**
-     * When non-empty, intersect each facet's recalled evidence with this id set
-     * before the LLM runs (publish-review gate). Empty intersection → empty
-     * section (legitimate no-evidence), not a stale fallback. Omit / empty →
-     * no gate.
+     * Publish-review gate: when SUPPLIED, each facet's recalled evidence is
+     * intersected with this id set before the LLM runs, so synthesis can only draw
+     * on memories the user approved for publication. Empty intersection → empty
+     * section (legitimate no-evidence), not a stale fallback.
+     *
+     * Pass the user's published set (e.g. `getAllVaultMemoriesOp(ctx, { visibility:
+     * ["public"] })`) to keep a published profile derivable only from published
+     * memories — People Nearby's two-tier model treats `private` memories as never
+     * leaving the device, and a summary derived from them is a derivative that does.
+     *
+     * `[]` means "nothing approved" and gates everything OUT (no recall, no LLM
+     * call, empty sections). **Omitting the field is the only way to run ungated**
+     * — that asymmetry is deliberate, so a caller computing a published set can
+     * never accidentally disable the gate by finding it empty.
      */
     reviewedMemoryIds?: readonly string[];
 }

package/dist/expo/index.d.ts

@@ -7710,10 +7710,20 @@ interface SynthesizeProfileOptions extends PortalLlmAuth {
      */
     proofCountAlpha?: number;
     /**
-     * When non-empty, intersect each facet's recalled evidence with this id set
-     * before the LLM runs (publish-review gate). Empty intersection → empty
-     * section (legitimate no-evidence), not a stale fallback. Omit / empty →
-     * no gate.
+     * Publish-review gate: when SUPPLIED, each facet's recalled evidence is
+     * intersected with this id set before the LLM runs, so synthesis can only draw
+     * on memories the user approved for publication. Empty intersection → empty
+     * section (legitimate no-evidence), not a stale fallback.
+     *
+     * Pass the user's published set (e.g. `getAllVaultMemoriesOp(ctx, { visibility:
+     * ["public"] })`) to keep a published profile derivable only from published
+     * memories — People Nearby's two-tier model treats `private` memories as never
+     * leaving the device, and a summary derived from them is a derivative that does.
+     *
+     * `[]` means "nothing approved" and gates everything OUT (no recall, no LLM
+     * call, empty sections). **Omitting the field is the only way to run ungated**
+     * — that asymmetry is deliberate, so a caller computing a published set can
+     * never accidentally disable the gate by finding it empty.
      */
     reviewedMemoryIds?: readonly string[];
 }

package/dist/expo/index.mjs

@@ -8219,7 +8219,8 @@ function configMatches(a, b) {
   return a.redacted === b.redacted && a.facetsSignature === b.facetsSignature && (a.reviewedMemoryIdsSignature ?? "") === b.reviewedMemoryIdsSignature && a.scopes.length === b.scopes.length && a.scopes.every((s, i) => s === b.scopes[i]);
 }
 function reviewedMemoryIdsSignature(ids) {
-  if (ids === void 0 || ids.length === 0) return "";
+  if (ids === void 0) return "";
+  if (ids.length === 0) return "\0gated-empty";
   return [...new Set(ids)].sort().join("\n");
 }
 function facetsSignature(facets) {
@@ -8329,7 +8330,16 @@ async function synthesizeFacet(facet, ctx, options, prior) {
   const factTypeWeights = { ...DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, ...options.factTypeWeights };
   const proofCountAlpha = options.proofCountAlpha ?? DEFAULT_PROFILE_PROOF_ALPHA;
   const reviewed = options.reviewedMemoryIds;
-  const hasReviewGate = reviewed !== void 0 && reviewed.length > 0;
+  const hasReviewGate = reviewed !== void 0;
+  if (hasReviewGate && reviewed.length === 0) {
+    return {
+      key: facet.key,
+      label: facet.label,
+      text: "",
+      sourceMemoryIds: [],
+      generatedAt: Date.now()
+    };
+  }
   const recalled = await recall(facet.query, ctx, {
     scopes,
     limit: hasReviewGate ? RECALL_MAX_LIMIT : limit,

package/dist/react/index.cjs

@@ -18265,7 +18265,8 @@ function configMatches(a, b) {
   return a.redacted === b.redacted && a.facetsSignature === b.facetsSignature && (a.reviewedMemoryIdsSignature ?? "") === b.reviewedMemoryIdsSignature && a.scopes.length === b.scopes.length && a.scopes.every((s, i) => s === b.scopes[i]);
 }
 function reviewedMemoryIdsSignature(ids) {
-  if (ids === void 0 || ids.length === 0) return "";
+  if (ids === void 0) return "";
+  if (ids.length === 0) return "\0gated-empty";
   return [...new Set(ids)].sort().join("\n");
 }
 function facetsSignature(facets) {
@@ -18375,7 +18376,16 @@ async function synthesizeFacet(facet, ctx, options, prior) {
   const factTypeWeights = { ...DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, ...options.factTypeWeights };
   const proofCountAlpha = options.proofCountAlpha ?? DEFAULT_PROFILE_PROOF_ALPHA;
   const reviewed = options.reviewedMemoryIds;
-  const hasReviewGate = reviewed !== void 0 && reviewed.length > 0;
+  const hasReviewGate = reviewed !== void 0;
+  if (hasReviewGate && reviewed.length === 0) {
+    return {
+      key: facet.key,
+      label: facet.label,
+      text: "",
+      sourceMemoryIds: [],
+      generatedAt: Date.now()
+    };
+  }
   const recalled = await recall(facet.query, ctx, {
     scopes,
     limit: hasReviewGate ? RECALL_MAX_LIMIT : limit,

package/dist/react/index.d.mts

@@ -8949,10 +8949,20 @@ interface SynthesizeProfileOptions extends PortalLlmAuth {
      */
     proofCountAlpha?: number;
     /**
-     * When non-empty, intersect each facet's recalled evidence with this id set
-     * before the LLM runs (publish-review gate). Empty intersection → empty
-     * section (legitimate no-evidence), not a stale fallback. Omit / empty →
-     * no gate.
+     * Publish-review gate: when SUPPLIED, each facet's recalled evidence is
+     * intersected with this id set before the LLM runs, so synthesis can only draw
+     * on memories the user approved for publication. Empty intersection → empty
+     * section (legitimate no-evidence), not a stale fallback.
+     *
+     * Pass the user's published set (e.g. `getAllVaultMemoriesOp(ctx, { visibility:
+     * ["public"] })`) to keep a published profile derivable only from published
+     * memories — People Nearby's two-tier model treats `private` memories as never
+     * leaving the device, and a summary derived from them is a derivative that does.
+     *
+     * `[]` means "nothing approved" and gates everything OUT (no recall, no LLM
+     * call, empty sections). **Omitting the field is the only way to run ungated**
+     * — that asymmetry is deliberate, so a caller computing a published set can
+     * never accidentally disable the gate by finding it empty.
      */
     reviewedMemoryIds?: readonly string[];
 }

package/dist/react/index.d.ts

@@ -8949,10 +8949,20 @@ interface SynthesizeProfileOptions extends PortalLlmAuth {
      */
     proofCountAlpha?: number;
     /**
-     * When non-empty, intersect each facet's recalled evidence with this id set
-     * before the LLM runs (publish-review gate). Empty intersection → empty
-     * section (legitimate no-evidence), not a stale fallback. Omit / empty →
-     * no gate.
+     * Publish-review gate: when SUPPLIED, each facet's recalled evidence is
+     * intersected with this id set before the LLM runs, so synthesis can only draw
+     * on memories the user approved for publication. Empty intersection → empty
+     * section (legitimate no-evidence), not a stale fallback.
+     *
+     * Pass the user's published set (e.g. `getAllVaultMemoriesOp(ctx, { visibility:
+     * ["public"] })`) to keep a published profile derivable only from published
+     * memories — People Nearby's two-tier model treats `private` memories as never
+     * leaving the device, and a summary derived from them is a derivative that does.
+     *
+     * `[]` means "nothing approved" and gates everything OUT (no recall, no LLM
+     * call, empty sections). **Omitting the field is the only way to run ungated**
+     * — that asymmetry is deliberate, so a caller computing a published set can
+     * never accidentally disable the gate by finding it empty.
      */
     reviewedMemoryIds?: readonly string[];
 }

package/dist/react/index.mjs

@@ -9036,7 +9036,8 @@ function configMatches(a, b) {
   return a.redacted === b.redacted && a.facetsSignature === b.facetsSignature && (a.reviewedMemoryIdsSignature ?? "") === b.reviewedMemoryIdsSignature && a.scopes.length === b.scopes.length && a.scopes.every((s, i) => s === b.scopes[i]);
 }
 function reviewedMemoryIdsSignature(ids) {
-  if (ids === void 0 || ids.length === 0) return "";
+  if (ids === void 0) return "";
+  if (ids.length === 0) return "\0gated-empty";
   return [...new Set(ids)].sort().join("\n");
 }
 function facetsSignature(facets) {
@@ -9146,7 +9147,16 @@ async function synthesizeFacet(facet, ctx, options, prior) {
   const factTypeWeights = { ...DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, ...options.factTypeWeights };
   const proofCountAlpha = options.proofCountAlpha ?? DEFAULT_PROFILE_PROOF_ALPHA;
   const reviewed = options.reviewedMemoryIds;
-  const hasReviewGate = reviewed !== void 0 && reviewed.length > 0;
+  const hasReviewGate = reviewed !== void 0;
+  if (hasReviewGate && reviewed.length === 0) {
+    return {
+      key: facet.key,
+      label: facet.label,
+      text: "",
+      sourceMemoryIds: [],
+      generatedAt: Date.now()
+    };
+  }
   const recalled = await recall(facet.query, ctx, {
     scopes,
     limit: hasReviewGate ? RECALL_MAX_LIMIT : limit,

package/dist/server/index.cjs

@@ -29956,7 +29956,8 @@ function configMatches(a, b) {
   return a.redacted === b.redacted && a.facetsSignature === b.facetsSignature && (a.reviewedMemoryIdsSignature ?? "") === b.reviewedMemoryIdsSignature && a.scopes.length === b.scopes.length && a.scopes.every((s, i) => s === b.scopes[i]);
 }
 function reviewedMemoryIdsSignature(ids) {
-  if (ids === void 0 || ids.length === 0) return "";
+  if (ids === void 0) return "";
+  if (ids.length === 0) return "\0gated-empty";
   return [...new Set(ids)].sort().join("\n");
 }
 function facetsSignature(facets) {
@@ -30066,7 +30067,16 @@ async function synthesizeFacet(facet, ctx, options, prior) {
   const factTypeWeights = { ...DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, ...options.factTypeWeights };
   const proofCountAlpha = options.proofCountAlpha ?? DEFAULT_PROFILE_PROOF_ALPHA;
   const reviewed = options.reviewedMemoryIds;
-  const hasReviewGate = reviewed !== void 0 && reviewed.length > 0;
+  const hasReviewGate = reviewed !== void 0;
+  if (hasReviewGate && reviewed.length === 0) {
+    return {
+      key: facet.key,
+      label: facet.label,
+      text: "",
+      sourceMemoryIds: [],
+      generatedAt: Date.now()
+    };
+  }
   const recalled = await recall(facet.query, ctx, {
     scopes,
     limit: hasReviewGate ? RECALL_MAX_LIMIT : limit,

package/dist/server/index.d.mts

@@ -8356,10 +8356,20 @@ interface SynthesizeProfileOptions extends PortalLlmAuth {
      */
     proofCountAlpha?: number;
     /**
-     * When non-empty, intersect each facet's recalled evidence with this id set
-     * before the LLM runs (publish-review gate). Empty intersection → empty
-     * section (legitimate no-evidence), not a stale fallback. Omit / empty →
-     * no gate.
+     * Publish-review gate: when SUPPLIED, each facet's recalled evidence is
+     * intersected with this id set before the LLM runs, so synthesis can only draw
+     * on memories the user approved for publication. Empty intersection → empty
+     * section (legitimate no-evidence), not a stale fallback.
+     *
+     * Pass the user's published set (e.g. `getAllVaultMemoriesOp(ctx, { visibility:
+     * ["public"] })`) to keep a published profile derivable only from published
+     * memories — People Nearby's two-tier model treats `private` memories as never
+     * leaving the device, and a summary derived from them is a derivative that does.
+     *
+     * `[]` means "nothing approved" and gates everything OUT (no recall, no LLM
+     * call, empty sections). **Omitting the field is the only way to run ungated**
+     * — that asymmetry is deliberate, so a caller computing a published set can
+     * never accidentally disable the gate by finding it empty.
      */
     reviewedMemoryIds?: readonly string[];
 }

package/dist/server/index.d.ts

@@ -8356,10 +8356,20 @@ interface SynthesizeProfileOptions extends PortalLlmAuth {
      */
     proofCountAlpha?: number;
     /**
-     * When non-empty, intersect each facet's recalled evidence with this id set
-     * before the LLM runs (publish-review gate). Empty intersection → empty
-     * section (legitimate no-evidence), not a stale fallback. Omit / empty →
-     * no gate.
+     * Publish-review gate: when SUPPLIED, each facet's recalled evidence is
+     * intersected with this id set before the LLM runs, so synthesis can only draw
+     * on memories the user approved for publication. Empty intersection → empty
+     * section (legitimate no-evidence), not a stale fallback.
+     *
+     * Pass the user's published set (e.g. `getAllVaultMemoriesOp(ctx, { visibility:
+     * ["public"] })`) to keep a published profile derivable only from published
+     * memories — People Nearby's two-tier model treats `private` memories as never
+     * leaving the device, and a summary derived from them is a derivative that does.
+     *
+     * `[]` means "nothing approved" and gates everything OUT (no recall, no LLM
+     * call, empty sections). **Omitting the field is the only way to run ungated**
+     * — that asymmetry is deliberate, so a caller computing a published set can
+     * never accidentally disable the gate by finding it empty.
      */
     reviewedMemoryIds?: readonly string[];
 }

package/dist/server/index.mjs

@@ -6991,7 +6991,8 @@ function configMatches(a, b) {
   return a.redacted === b.redacted && a.facetsSignature === b.facetsSignature && (a.reviewedMemoryIdsSignature ?? "") === b.reviewedMemoryIdsSignature && a.scopes.length === b.scopes.length && a.scopes.every((s, i) => s === b.scopes[i]);
 }
 function reviewedMemoryIdsSignature(ids) {
-  if (ids === void 0 || ids.length === 0) return "";
+  if (ids === void 0) return "";
+  if (ids.length === 0) return "\0gated-empty";
   return [...new Set(ids)].sort().join("\n");
 }
 function facetsSignature(facets) {
@@ -7101,7 +7102,16 @@ async function synthesizeFacet(facet, ctx, options, prior) {
   const factTypeWeights = { ...DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, ...options.factTypeWeights };
   const proofCountAlpha = options.proofCountAlpha ?? DEFAULT_PROFILE_PROOF_ALPHA;
   const reviewed = options.reviewedMemoryIds;
-  const hasReviewGate = reviewed !== void 0 && reviewed.length > 0;
+  const hasReviewGate = reviewed !== void 0;
+  if (hasReviewGate && reviewed.length === 0) {
+    return {
+      key: facet.key,
+      label: facet.label,
+      text: "",
+      sourceMemoryIds: [],
+      generatedAt: Date.now()
+    };
+  }
   const recalled = await recall(facet.query, ctx, {
     scopes,
     limit: hasReviewGate ? RECALL_MAX_LIMIT : limit,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anuma/sdk",
-  "version": "3.13.2",
+  "version": "4.0.0",
   "description": "",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",